$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa File: d2bbd598-d050-3e9c-b8b7-18a976731d02.roa (raw, json) Hash identifier: 6YPbZcSgwByaoWTtf0QyfzpQ3xGFA2Qi6UzFHWzxYks= Subject key identifier: 09:14:60:C7:56:A4:47:83:AA:BA:33:B7:FB:C7:F4:B8:DF:46:B7:01 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584CF5879E4408AE170D2D4CD440 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 397976 IP address blocks: 158.247.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9e:44:08:ae:17:0d:2d:4c:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=3809054e-87b3-4120-b1e3-3d24133c8a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:1c:f4:6e:2f:49:9f:0b:36:43:6c:92:a7: c0:dd:79:57:fb:8d:02:50:3f:c4:a0:71:09:c5:c8: 5d:1c:09:16:57:f6:70:34:a1:66:18:b3:0d:74:b7: 4c:e3:ab:a0:c3:cf:90:ed:3e:30:ad:6d:22:8d:89: 20:c0:ca:fa:4b:9e:42:42:f8:b0:6e:13:21:45:d3: d3:a0:bf:03:7c:a2:b2:85:cb:23:1d:67:5c:c5:a2: 06:42:a9:af:f0:1f:8d:ef:82:40:78:82:74:e1:29: 94:d7:48:48:2d:55:d1:72:65:19:e8:db:99:eb:bf: 67:79:33:a4:f4:10:2b:06:7b:51:2f:15:2c:92:92: 04:c2:2a:a1:45:49:25:bc:05:85:04:e2:fe:de:2b: 3b:45:97:4d:48:31:28:3c:04:d5:45:d4:88:95:8b: 03:e3:20:0a:e1:37:54:40:2c:0a:33:8d:bf:a1:65: fa:b6:17:41:75:d5:cc:33:29:d1:6e:e3:7b:f8:71: 8f:0d:b6:56:f2:8a:9e:62:cc:ea:73:03:16:46:37: 8f:43:40:01:e2:7c:2c:91:14:31:82:4c:e9:c2:66: 3b:2e:77:c6:56:c7:ae:53:48:bc:18:1d:9d:66:4e: 38:15:ed:01:a2:1f:fd:bd:42:33:5b:52:ef:ea:85: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:14:60:C7:56:A4:47:83:AA:BA:33:B7:FB:C7:F4:B8:DF:46:B7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 158.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8b:9d:b0:49:1a:2a:87:e2:45:11:7c:06:7c:58:9d:f4:7b: 4c:68:47:56:8b:56:cf:47:2a:21:18:48:58:5a:84:87:5f:2b: ae:b9:b8:92:04:b7:b6:b0:9a:b0:f6:7c:40:98:ff:94:30:4f: d4:fb:c6:b1:7e:2b:4c:35:97:0f:ce:a3:5c:22:bb:88:2c:55: 54:4e:1f:11:aa:b7:fa:8c:5e:03:8c:43:69:a4:b5:29:67:4d: 42:ee:6f:10:99:29:63:c9:92:45:fe:7c:1a:3a:26:85:7d:e0: 20:0b:72:82:e5:41:97:36:3a:cf:77:f0:68:44:cc:a9:02:2f: 7c:93:cf:ee:70:aa:47:76:ad:c8:0d:57:4b:38:6b:3d:24:c4: 17:5a:fd:51:e8:60:c7:87:d8:54:ed:54:ad:92:51:1c:0b:37: c4:99:7c:68:11:94:09:7f:c5:29:da:0b:6a:b9:98:88:d2:16: 10:7d:26:3e:fe:fd:c5:5b:e9:14:02:a8:9c:c5:e7:26:b0:41: 9c:51:68:ce:d2:24:fc:d0:f4:3e:51:b1:87:28:0e:e6:e4:c8: db:3e:ee:8f:b5:d3:ae:0a:c8:d4:7e:44:ce:f3:8e:d0:cd:8b: 3c:b9:be:29:0e:62:26:ca:89:d3:7f:d4:d3:d4:c3:92:e4:75: e5:e5:c1:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h55ECK4XDS1M1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MzgwOTA1NGUtODdiMy00MTIwLWIxZTMtM2QyNDEzM2M4YTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqogc9G4vSZ8LNkNskqfA3XlX+40CUD/EoHEJ xchdHAkWV/ZwNKFmGLMNdLdM46ugw8+Q7T4wrW0ijYkgwMr6S55CQviwbhMhRdPT oL8DfKKyhcsjHWdcxaIGQqmv8B+N74JAeIJ04SmU10hILVXRcmUZ6NuZ679neTOk 9BArBntRLxUskpIEwiqhRUklvAWFBOL+3is7RZdNSDEoPATVRdSIlYsD4yAK4TdU QCwKM42/oWX6thdBddXMMynRbuN7+HGPDbZW8oqeYszqcwMWRjePQ0AB4nwskRQx gkzpwmY7LnfGVseuU0i8GB2dZk44Fe0Boh/9vUIzW1Lv6oWKSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkUYMdWpEeDqrozt/vH9LjfRrcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZDJiYmQ1OTgtZDA1MC0z ZTljLWI4YjctMThhOTc2NzMxZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeLnbBJGiqH4kURfAZ8WJ30e0xoR1aLVs9HKiEYSFhahIdfK665uJIE t7awmrD2fECY/5QwT9T7xrF+K0w1lw/Oo1wiu4gsVVROHxGqt/qMXgOMQ2mktSln TULubxCZKWPJkkX+fBo6JoV94CALcoLlQZc2Os938GhEzKkCL3yTz+5wqkd2rcgN V0s4az0kxBda/VHoYMeH2FTtVK2SURwLN8SZfGgRlAl/xSnaC2q5mIjSFhB9Jj7+ /cVb6RQCqJzF5yawQZxRaM7SJPzQ9D5RsYcoDubkyNs+7o+1064KyNR+RM7zjtDN izy5vikOYibKidN/1NPUw5LkdeXlwSE= -----END CERTIFICATE-----Generated at Mon Mar 2 06:31:59 2026 by rpki-client